awslabs / collectd-cloudwatch

A collectd plugin for sending data to Amazon CloudWatch
MIT License
200 stars 132 forks source link

Support for credential provided by sts.AssumeRole #50

Open mahdi-hdi opened 7 years ago

mahdi-hdi commented 7 years ago

Currently, the plugin just uses static aws_access_key and aws_secret_key credential or keys provided by Ec2 AIM role. It might be useful to support credential provided by AWS STS which gives the ability to assume different roles. An use-case is when you want to put metrics to Cloudwatch in another AWS account. So, you should create a role with proper policies and then use aws sts to assume the role in order to get temporary keys.

mkozjak commented 4 years ago

Agree. Another use-case is usage on embedded devices that leverage AWS IoT Core to log all system stdout and stderr pipes before the aws iot client kicks in. awslabs/amazon-cloudwatch-publisher#2